CmdID

CmdID / Files

filtdump.exe

Filter dump utility file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real filtdump.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionFilter dump utility

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\filtdump.exe · signed by Microsoft Windows Kits Publisher

41de078de728b1d59afc389dc34ce7b0267991960b5b4c2f8bc30a5c9987d31c

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\filtdump.exe · signed by Microsoft Corporation

4c2ecde2c1b156f90dda0c3e0790b9f8e878dde5c9b12201b60f875266c91395

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\filtdump.exe · signed by Microsoft Corporation

7eca7100ea2168aaf635ddd6c12c2d00fe11b0858fad26a876679187e93bf000

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\filtdump.exe · signed by Microsoft Windows Kits Publisher

9128513e5c1e6d0ac976d391df5c29eb271e81e48e95ee3a22f1935045fe4787

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.